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During t;ie ".ask half of .he nineteenth -vent iry :1r:? uca.i £sr fostsai 

neth*..-dc of proof became evident i:o Eaatheroatieian;! who vers aakii-s ;;uch 

confidence- shaki/vs discover:! 33 as non-Euclid^n .jeccMtcy 

The demand 15 not to be denied: every juiap traci. be 
tarred from err deductions That il is hard to catisfy 
■must be set dews to the ted iouBaec a of proceeding step 
by atep,- Every proof which is even a litff.e coapli* 
cat 2d threatens to become inordinately losy., [Ml] 

Gv Fre ggj ".884 .. 

This general -ieelse for tiger has persisted since tb-cifi, titae, and a great 
deal has been learned about formal methods, But, for the reason noted 
by Fregc, vary l.v:tie o£ real mathematics has been cone with full foraal 
treatment .. Oar present hope is to use computers to take the drudgery 
oaf, of formal dsnonst vat ions, just as they are takiaj; it out of account- 
ing 

Toward this end, several programs are under way They vary in pur- 
poae; the Proof decker {ES, H9] is to be capable of billing the gaps of 
a proof j the work of Matt et , &1, [H10] eiws to achieve the equivalent 
of a desk calculator ability as an aid to s mathematician doing formal 
proofs -. 

'fhe uc'ji intriguins prospect, however, is that computers can even- 
tually be 't,::d(< tr b~th devise and prove interesting con»£?ivial theorems 
wholly on bne.r c?«. The first of thaee desires, the Invention ox inter- 
cs.-ir.g conja>. : .;r;>.3, ha 3 «ou even been attempted,, L believe, however, 
,':.. t we ::.re ;.-. ihe verge of achieving the second ol these eudo , the 
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aioehonlcai proof •>? noa-trivial theorems, a belie x which > Lore i e&rc 
justify la the sequel ~ 

i - The Hl5to':.iga.__ Dave lopraent of Mechanical Theorem.; i£2HAH£ 

This section discusses the relationship bstvaen '.he f;wo separate 
approaches which have been taken toward saeehsalcai theorem pyoviiig. 
Ivfc will not discuas the relatively trivial history o£ '-logic roachl^es" 
that are based on switching models of Boolean Algebra [1'32] , She Jrirs-t 
significant approach, which 1 will term "subgoal reduction", was ini- 
tiated by She aork of Bewail, Shaw and Simon described in the Logic 
Theory Machine papers (LTM) [Hi, H2]» Toe other approach depends on a 
theorem due to fierbracd [L5], This work is typified by the programs 
of Gilmore fP2|, Wang [P3, P4, P5J, and Davis and Putnam [P8, P9]„ I 
will call this the "Herbrand expansion" approach,, 

1 „ 1 „ I jterbrand Expansion Method 

The theorem of Herbsand alluded to above yields a proof procedure 
for quantification theory (first order/lower predicate/functional calculus), 
A proof procedure is an algorithm which can provide a proof for a formula 
which is valid, but may not terminate if the formula is not valid, (A 
valid formula is true no matter what predicates are substituted for its 
predicate variables,,) Unfortunately, it is hopeless to search for an 
algorithm which will distinguish unfailingly between theorems and non« 
theorems, siacc quantification theory is undecidabie. 

1 .1,1 ., Some Ff ; rtac l i on 

< v;i'.l act? describe the system of potation for quantification theory 
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tc be used; 

1 Individual variables'; x, y, 3 S u, v : »> x, , y. ,. : 
2- Individual constants:; c. b, c ; a, , :>, , <:., , , .. .. 

A J. J. 

3-. Predicate variables- F, G, H, F T , C. ; , •., <■» ■ 

4 Function variables:- f, g, h, £., g, « .. s ,, 
Some predicate constants and function constants will bo introduced l-ater 

A literal is s.a expression, of the focm? 
P[A. , k,,,,k I 
o" of the form 

where P is a predicate symbol and the A. are testa J-. 

A t er m is 

1, an individual variable 
2 a an Individual constant 
3,.. an expression of the form 

V A < " A n 3 

where ^ ia a inaction symbol and the A^ axe terms., 

If B. acd S are wff's, thee the following are te ll fonaed formu lae Off } ;■ 
1; A liceral 

2, (RVS), <SAS),(ELdS),<*&, (R5S) 

3, (ac)K, (Bx)R 

T will omit «;.<tra parentheses when no confusion will result, and 

sosetlsaea use an Individual constant symbol i:?, place of a function of 

no arguments..- 

* 1 - 2 -. Her b rand i i\ Th e or em 

Ster brand's theorem defines a process which in effect translates a 



<*--tf«"> 



formula of quantification theory into a new formula (not equivalent to 
the original) which has no quantifiers, which I will call the f jree^ vari- 
jbl.a_fojffi. (fvf ) ., 

The theorem also provide*} a method of generating en infinite, hier- 
archically-structured set of Individuals, the Herbrand jtfd verse , which 
are to ha substituted for the free variables iti the free variable form 
of the formula. 

The proof procedure can be described as follows: 

1, Let uc suppose there are n free variables in the formula. Form 
successive a- tuples of members of the Herbrand un. verse, exliauoting all 
possible combinations of those elements already generated before gener- 
ating a new elemert., 

2, Substitute an n-tuple for the variables in the free variable 
form sad form the disjunction of this sentence with that already accumu- 
lated, 

3,, If this formula is a tautology the original theorem is valid, 
if cot, then select a new n-tuple and repeat the process* 
Every formula which is valid will result in a tautology after some finite 
number of terms have been accumulated,, There is, of course, no effective 
procedure for estimating the number of terms necessary in the general 
case u However- for certain forms of the original formula upper bounds 
can be sets these are the decidable cases,. 

The explanation of the Herbrand proof procedure in Davis and Putnam [P8] 
is far more satisfying intuitively than that which I give here* I recora- 
mend that the reader study that paper for the feel it gives for what is 
really going or,.. My purpose here is to summarize the process in terms 
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3., Xf t: Is 2 negative variable occurring ir; R, substitut?-: 

£. *>:, !S i;) ,x,,« - . ) for it everywhere It occurs , where L La a 
previously unused function symbol and the x, sre all £be v<K-."i- 
ab3.es which were bound by a positive quantifier vhose scope 
extended over R . 

The resulting frei variable xonu of the fosMtula bar, no quantifiers, ane 

may have some new function symbols ■ 

Ths Berbrand universe 3 1J, is formed, from the function symbols and 
individual constants appearing in the free variable £ana„ Included aw>n% 
the individual constants for this purpose are these functions of ac argu- 
ments which appear. If there are no constants of either variety then 
tne single constant "a" is taken.. These elements fora the level 



of the hierarchy shieh I will denote H»e 

th 
The t+1 level, H^ f is the set of all expressions of the form 

£(Kp K^,., „ u ) where f Is a function symbol occurring in the fvf» and the 

K'a are nembers os one of the seta EL, j < r, and at least one of the 

K's is of level r„- 

H is just V?Jl.o 

[Note that H n>0 easy be emptv,J 
w 



1 „ 1 . 5 . The. Proof Proced ure P rograms 

kil die. proof procedure peograaa described in Khz literature, so far 
use essentially the. method described above; a growing prepositional expres* 
iricn is generated and tested, The primary differences of these pxogtatns 



Gilmore's program also included methods fox c^coguisinfc when a for- 
mula vug in certain decidabie domains and would compute an tipper boued 
to the number of instances of Che rvf which must be investigated.. 1,3 order 
co be able to establish that invalid formulas falling in this cltsa were 
non-thc-oratac* 

1 - » 5 ■ 2 ■ ■ . The Davxa«-Puteai o Al gorithm 

.Davie and Putnam made a major improvement to proof procedure programs 

IP8, ?9} Q They deal with the negated £vf its conjanct •■vg normal form* 
Although aoir«what complicated roduction rules are necessary to recognize 
that the proposition*! formula is false when it is expressed this way, 
the addition o£ a new instance of the fv£ to the accumulated expression 
doesn't involve any mora work than simply "tacking it on". The result- 
lug expression is still in conjunctive normal form. The reduction rule?,, 
while complicated, require a computation time which groin only linearly 
with the length of the expression 

lrl„5.,3 Thjs_ Prog ram of J 3 A . Robinson 

No improvement in proof procedures has come to my attention past 
the program of Davis and Putnam, (Note; I have not. yet studied the 
papers of Joyce Friedman fPH, 2>12])„ j. A „ Robinson [HO] , while pre- 
senting Ae problem in an enlightening fashion which will be discussed 
fully below, really has no heuristic which will speed up or reduce the 
search for a psoof u He also proposes a proof procedure which is essen- 
tially an unjustified reordering of the usual search (although he doesn't 
seem to realise this), £ will deal more fully with the question of reorder- 
ing the search in the next section,, 



it will be e/ident from the examples la the second section thai proofs 
in the llerbrand theorem form sad some more fautiliar fora such as in. a 
natural deduction system are readily comparable, at:d Indeed could be trims-* 
laced cither one So the other by a suitable (complex but efficient) algo- 
rithm, This fact was pointed out by A, Robinson [FlJ, and elaborated 
on by J. : A-, Robin-son iFiOj , r-fco has written a program which translates 
a Eerbrand Expansion into a deductive proof.. 

this completes my precis of the Barb rand type programs a 1 have not 
mentioned several works here, because they are essentially only trivial 
variations of the themes which have been presented, The papers of Wang 
[P3» *»4 3 F5], how'tver, contain much more than descriptions of proof pro- 
cedures, sxiti I recommend that they ba read carefully,, 

l»2fl Sub goa 1 -Ite d; te t i oa Me the d 

in general whan embarking on a search it is advisable to choose care- 
fully the order in which possibilities are examined., The important ques~ 
tlon of how much time should be spent planning is one of economics , and 
taust be decided on this basis * It is in this matter as to how much effort 
should be alioted to ordering the search that the two groups of machine 
theorem p rovers are at odds* An important point which is not generally 

recognised is chat the gubgo&l reduction programs are searching essentially 

the same space as those which cake the Herbrand approach, but spend more 

time deciding where to look next-, 

1 ... 2 .. i , The .Logic Theory ...Machine 

The LTM papers [HI, H2'J represent the saosfc significant results so 
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far achieved in tise field of artificial intelligence. Three k<zy ideas 
to be found here ure subgoal reduction, Hot structure programming tech- 
nique, and recursive subroutine capability,, Unfortunately the authors' 
logic was unsophisticated, and I feel this has caused most logicians 
working in the. machine theorem-proving area to discomt the powerful 
techniques of heuristic programming which have sprung from this work, 

MSS seemed to imply that a program that would e:>u3-sine more likely 
proofs of a formula first, would lose cognizance of soae possible proof 
sequences and cease to be a proof procedure „ Indeed, their program did 
have this property, not because they used search reducing heuristics but 
because their ad hoc logic was incomplete. From a practical standpoint 
the whole issue is immaterial since computer limitations prevent any 
program from being a true proof procedure. 

1»2<,1„1,» S ubgoal Reduction 

The LTM, a program to prove theorems in prepositional calculus, 
uses the technique of separating a problem into pieces and attacking 
each in the same fashion as the whole « Eventually, it is hoped, the 
problem will be reduced to a large number of "atomic" problems which the 
machine can deal with as wholes „ This is the process I call subgoal 
reduction o 

The UBS. use3 five axioms and three rules of inference. The latter 

are? 

1, Substitution % any proposition may be substituted for a propos- 
itions! variable., 
2 1. Replacements an expression may be replaced by its definition, 
3 - Mtodua-po aens ; from p and poq infer q„ 
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Aefcually, instead of (3) they use "chaining", a snetatheoreta based on (3). 

1„2>1 I 2. J Wo rking Backwar ds 

En the MM the initial goal is the formula to be proved, and the 
method of reducing the problem to pieces is to find one or two axioms 
or previously proved theorems which can be transformed into the problem 
a£ hand by one of the three rules of inference., Upon application of 
modus ponens the {remise usually becomes a new subgoal. The process 
begins with the conclusion of the theorem as the initial problem and ends 
with atomic problems which are axioms and premises; thus it is termed 
working backwards ,. . 

1,2. L;3. Matching 

The process of working backwards requires that a means be available 
to determine whether a formula is an instance of some schema. KM 
employed a matching process for this purpose,. This is a recursive search 
procedure which will determine what substitutions must be made for vari- 
ables in the schema to convert it to the specific formula desired, 

1.2.2. G elernter's Geometer 

Gelernter's geometry program's [H4, H5, H6J overall organisation 
is the same as the LTH. It uses all the techniques described above which 
were developed for the LTM, such as subgoal reduction and working back- 
ward, It eventually proved moderately difficult theorems at the level 
of high school geometry,, 

From & private discussion with Gelemter, I have the impression that 
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thc: program utilises what is equivalent to a negation- and-quantifier- 
free logic, (h. system in which neither denials nor quantifiers appear, 
but with the interpretation ttet free variables ba regarded as univer- 
sally quassfclfifcd,,) The fact that certain statements are not expres- 
sible in Shis calculus is reflected in a limitation on th& kinds of 
proof methods which Galerater*s program can use„ For example, it can- 
not, make a re ductio ad absurdim arguments 

1,2,2,1, The Diagram 

Tha most important heuristic included in Galemter's program (due 
to Minsky) was the interpretation of formulae in an example diagram,, 
Since most false propositions in geometry are false in a specific example 
(such as the proposition "Two arbitrary lines form a right angle"), an 
invalid modus pone ns step (ps»q where p is false) can be eliminated as 
a means of deriving q without searching for a proof of its premise, 
simply by consulting the diagram., 

This principle can be extended to other domains of theorem proving 
besides logic, Ac Robinson proposes a theorem prover in number theory 
[H7] which tries out a number of instances of a proposed formula to 
attempt to refute it before trying to prove it a This process could have 
beers applied as a heuristic in LTM, where the machine could have been 

assigned random truth values to prepositional variables » and evaluated 
the resulting Boolean expressions in an attempt to refute an inference. 
Indeed, this might be a good heuristic to add in Davis and Putnam's 
proof procedure program* 
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1 ., 2 „ 2 ,, 2 T ree Pri ming Heuristics 

The subgoal reduction method of problem solving generates a breach- 
ing tree structure of subpsobiams, called the B£SL.SSiS* wbose ex.t remit ic-.t 
represent atomic problems*. Sometimes whole limbs of this tree can be 
eliminated because for some reason they really don't help to solve the 
problem.. There are several techniques for finding the redundant goals; 
these are called "tree pruning" heuristics * 

1 2 2«,2, J 1» Interpretation of the Goal Tree as a Suppositional fformula 

The intermediate branch points of the goal tree indicate an "and" 
or an "or" type relation; i„e., , all the subproblems eminating from an 
"and" branch must be solved to achieve the goal for which the branch 
point stands, whereas only a single subprohlem' s solution suffices for 
the achievement of "or" branch points c 

This similarity between goal tree and logical relations suggests 
interpreting the goal tree as a prepositional formula, 

A propositional variable corresponding to each goal at the tip of 
a branch is to stand for the proposition that that, goal has been achieved 
and the propositions "and" and "or" are to have their normal interpreta- 
tions o If the propositional expression so derived can be shown to be 
true, then the goal at the root of the tree is achievable. 

Certain algebraic transformations on the propositional formula 
correspond to simplifying the goal tree. 

These simplifications consist of the elimination o£ goals which are 
redundant, For example, if the goal tree iss 
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*»" A 
v«faac> 
/ v - C 

C 

then the propotiit tonal formula corresponding to the tree is B v AC v C, 
Tlvis can be sii'splified to E^C, In this case., a 3-s a. redundant goal, 
The problem of elisiiaatiag redundant literals la a prepositional espres*' 
r ion involves finding the g rime ^ replicant s of a formula* and is Created 
in the atfitchlag circuit literature lM3» M4 a M5]» 

Golernter v fl program uses these Boolean function seductions on his 
goal tree (though t«?ithout recognizing tMa nice interpretation), 

A great number of comparisons need to be made to recognize the 
simplificationco in general seme problems which require little effort 
for their straightforward solution will not v/arrant the search to see 
if they a:?e redundant,- 

1 ■, 2 1 2 ., 2 , 2 , Sgffitagtic Sy mmetr y 

The notion of syntactic symmetry is a valuable heuristic used in 
Gelerntar'o program,, It is a formalization of the informal "and such- 
and-such follow similarly"., 

A s yntac tic .aytgaefcry is a permutation operator on the names of the 
variables in a formula which leaves the formula unchanged except, for 
rearrangement.. If is. is a syntactic symmetry of H then k(H) g (H) is 
valid,, The utility of this concept depends on this theorems if K is 
provable, from B and n is a syntactic symmetry of R then it(K) is also 
•provable from II. Saving :>«ce computed « and proved H.:»K, the theorem 
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Hsit(K) is free,. 

If let run unchecked a problem solving program might xcell be expected 
to eventually generate P, or some formula which is syntactically symmetric 
to P, as a subgoal in establishing P„ The program would probably then 
waste a lot of effort before trying some other line of attack. One way 
to circumvent this trouble is to make certain that no subgoal which is 
identical to or syntactically synHaetric to soess goal dependent on it is 
expanded.. 

The main trouble in the application of this principle is that not 
only must the ss's of a formula which one hopes will reappear be computed 
and stored, but also all newly generated formulae must be compared with 
all the old formulae and their ss'o to detect a reoccurrence. Storage 
end running time requirements demand a careful regulation of the use of 
this principle* Its unrestricted application was probably an inhibiting 
factor in Gelernter's programs 

1„2»2.3« J, A,, Robi nso n's P aper 

Ml.l i l Hl II III li „ i II ■ . ..■ j . U . u III H IIM— || ■ ■ l M I . H Ml fc < ,< 

The work of J. A. Robinson [P10J describes the Eerbrand proof pro- 
cedure in a manner which points out the essential components of a proof 
arrived at by this process „ These are the key concepts of a proof set 
and a verification set. Using these notions I will attempt to point out 
in Section 2, how to combine the best ideas in each of the two approaches 
to mechanical theorem proving. 

1.2. 2.3.1. Pr oof Set 

Let us consider the fvf in disjunctive normal form. I will use 
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e matrix such as: 
11 ^12 



Iel. 



L 21 L 22 "° h 2m„ 



T T 

L kl hc2 



L 



K 



to represent the fvf in disjunctive normal fc3:a, where the L*s are 
literals and the logical expression 

^U V L 12 V ..«) A (I»2i v I< 22 V "*) A '** 
is its interpretation,, 

A proof of a theorem consists of a tautologous disjunction of sub- 
stitution instances of the rows of L, where the objects substituted are 
elements of H« (Notice that a substitution instance of a single row 
may be included without the same substitution in the rest of L neces- 
sarily being included.) A proof se t is a set of elements from H which 
results in a tautology upon complete instantiation of L (substitution 
instances of all possible legal n-tuples) and such that this property 
is lost if any element is deleted from the set. 

A verification set of conjunctions is a set of instances of rows 
of L whose disjunction is tautologous , and such that' if any conjunct is 
deleted, the disjunction is not tautologous.. Th e Herbrand proof procedure 
Is really a search for a verification se t (which defines an accompanying 
proof set). The procedure calls for a complete search of the solution 
space of instantiations of rows of L to locate a verification 3et. For 
theorems of cossnon interest the verification set is quite small (usually 
contains less than 100 elements), compared to the astronomical sise of 
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sets generated by instantiating the fvf over all she elements of H whose 
level is less than or equal to that of the appropriate proof set* 

J., A, P.obinson [F10] has written a program which searches for a 
verification set when given a proof set. Although he gives no tios.es 
for the search which is made in this case s I believe :'.t must be quite 
slow, when operating on moderately large problems, for reasons I will 
state in Section 2. 

1.2.2.4. Summary 

We have seen that the Herbrand expansion proof procedure is a search 
for a small set. of-, substitution instances of rows of the fvf matrix. 
The proof procedures which have used this expansion have attempted to 
find this set by substituting successive elements from a fixed order- 
ing of E. This technique has failed on large problems because the ele- 
ments of H which are needed come from too far along in the enumeration. 
Methods have been developed which reorder the enumeration to suit the 
theorem. These are the heuristic techniques of LTM. 

Thus far they have been used with the greatest effectiveness in 
Gelernter's geometer. That this work did not attempt problems of a very 
difficult level will be the contention of the next section. 
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2 « Proposal for a Theorem P rover 

In this section I propose a program for geometry theorem proving 
which will be attacking what 1 believe to be the obstacle which is immedi- 
ately before us on the way toward mechanical theorem proving: the selec- 
tion of a proof aet. I believe that the solution of this problesi tv-ill 
then permit work on the much more difficult one . of generating signifi- 
cant and true conjectures as candidate theorems to be proved. I think 
that another problem of considerable importance snight possibly be solved 
by the device nest to be discussed; this is the problem of deciding what 
already proved theorems to "remember" to use as lemmas in further work. 

2.1. The Order of an Element of H 

The notion of the order of an element of E is closely related to 
that of level u E is again regarded as structured hierarchically by 
order, but the subclasses are slightly different than the levels,. 

A composite form is a term of the form; 
Q[X x i A 2 ;...A n 3 
where @ is a function symbol, and the A's are either individual, variables, 
constants, or composite forms. 

The Oth order of H is the set consisting of t; 

1. individual constants appearing in the fvf 

2„ composite forms appearing in fvf containing no individual vari- 
able symbols « 

r"KL 
H , the r-Mth order of H, is the set of all expressions of the fol- 
lowing forms, which haven't appeared in a lower order: 

1. $>[A, ; A„...A ] 
i ,i a 

where is a function symbol appearing in the fvf and the A's 
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i 
are members of H for i ■£. r and at least one of the A' s is £ rora 

E*. 

2. &{k t i A 2 ...A ] 

where ©{A.; A„».»A ] is a composite form appearing in the fvf 

X. Cm ii 

with elements of H" for i< r substituted for its free variables , 

r 
and at least one of the substituted elements is frota E * 

It is easy to show that H = U.°1h. = U.^H' 1 

justifying the phrase "nth order of II" since by the definition 

i * i 

of elements of H all elements of E, are contained in UT„ a H 

i 3-0 

so HSs Ui_qH j ; and every element of E appears in U*_qH. where 
k is the maximum depth of nesting of function symbols in the 
fvf. 



2.2. The Order of a Proof 

Let us define the o rder of a proof of a formula in Eerbrand expan~ 
sion form as the order of the highest element of E which appears in veri- 
fication set for the formula* 

The concept of the order of a proof suggests itself as a measure 
of difficulty of a proof of a theorem* Of course, whether or not this 
is a good measure depends on what we consider to be difficult; it seems 
reasonable in the sense that it agrees with my own notions of what are 
more or less difficult proofs. 

I will attempt to evaluate this saeasure's performance as a filter 
for significant theorems. I have hopes that it will be the key to enabl- 
ing the computer to decide what theorems will be useful as lemmas. 
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2«3« The Int erp retation of H in Geometry 

In the case of theoreias in geometry there is an interesting inter- 
pretation of the Herbrand universe. The elements of H whosa order is 
correspond to the parts of the diagram one draws when given a statement 
of a theorem. The first order of the hierarchy consists of all the ele- 
ments which may be made in one application of soma existential postulate 
to the elements of level 0, The higher orders are produced in a similar 
fashion from elements of the lower orders. 

The fact is almost indisputable that those theorems in geometry 
which require more complicated added constructions for their proof are 
more difficult to prove. 'Ihe order of an element in the added construc- 
tions can be estimated by finding the minimus number of operations (such 
as connecting two points, laying off a length) necessary to get it. 

The examples to follow will help to justify and illustrate this 
point. First, though, it is necessary to develop some more formalism. 

2 A, Ma ny-Sorted Quantificati on Theory 

In geometry we speak of many kinds of entities: points, lines, angles . 
eircles etc. The use of a many- sorted quantification theory greatly facil- 
itates proofs about systems of this kind., 

Certain modifications must be made to my formalism to adapt it to 
a many-sorted theory, Individual variables and constants will henceforth 
be given a number of primes to indicate the sort of object they stand 
for, e.g.,, x" will be an angle variable « 

To the definition of wff we must add the restriction (the type sob- 
^MH5iS5_£Ei£Sli22> that each predicate symbol or function symbol appear- 
ing in a foreula must have a consistent assignment of sort of variable 
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tc each argument position, that is, the same sort of object must appe?.r 
in the nth argument position of <$> in its every occurrence* In addition, 
each expression ^[A.; A 2 «..3 where <$ is a given f miction symbol will 
always denote the same sort of individual. 

2„5„ Examples *•' 

The angles o pposite the e^ual side s of an isoceles tr ian gle arc equal . 
This theorem of elementary Euclidean geometry has several simple 
proofs [£13» We shall examine two proofs of this theorem, only one of 
which requires a construction. The proofs will be given ia the Herbrand 
expansion form. In doing this I hope to convince the reader of two 
things; (1) that the interpretation X give of H is correct, and <2) 
that the order of the proof set is a significant measure of the difficulty 
of a proof., 

The two proofs require different lemmas, and only those actually 
necessary will be included among the postulates in each proof. (I intend 
the term postulat e to mean either an axiom or a previously proved theorem-.) 
The sort3 we are dealing with in these proofs are: points, line segments* 
angles, and triangles.. These will be sorts 0, 1, 2, 3 respectively. 
" 4" is a function from three points to a triangle, "C" is the predicate, 
"coiinear" and "&" a function from three points to an angle, The nota- 
tion "xy" is to indicate a function which maps two points into a segment. 
" =s " will denote all the relations of congruence (there can be no con- 
fusion about which one is meant). 

2.5.1. P roof without Construction 

In this example the theorem is proved by showing that the triangle 
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is congruent to itself flipped over by SSS. The theorem in quantifica- 
tion theory is: 

(<x)(y)(a)(u)(v)(w)[ £ [x;y;z] £* A[u;v;w] r> ^[x;y;z3 « ^.[u;v;w]] a 
(x)(y)(z)(w)(v)(w>[<vC|x;y;zJA /wC[u;v;if] a xy « uw a ay » wv a 
xy£ uv => fi> [u;y;r.] £ A[u;v;wJ]A (x)(yHz)E'v C[x;v;b] D ^C[x;b;y]]a 
Cs)Cy)[xyS yr.]} 3 (s)<y)(a)[/^C[s;y;a]A3EaS xy=> 4. [s;yjs] 3 ^[x;s;y]] 



The matrix derived from the fvf contains three functions of no arguments 
coming from the quantifiers in the conclusion of the main implication* 
I will write them as "a", "b", and "c". I have not rewritten bound vari- 
ables since no conflicts are present. 

1. n6te;y;a]£ AE»;v;w] *,(£[x;y;z3 »4[u;v;w]> 
2„ <vC[x;y;z] *»C[u;v;w] vA* ZV 1 ** 

xy^iv *.{A[x;y;z] 3fl[u;v;w] 

3, ~C[x;y;s] C[x;z;y] 

4, ~ (xy ^ yx) 

5, s«£ y « >v(y«3 x') 

6„ C[a;b;cj 

7„ /v(ac 3? ab) 

8c |£[a;b;e3 ^i.[a;c;b] 

A single instance of each row, or 8 conjuncts, is sufficient to 
establish the theorem. These ares 



-23- 



£>[a;b;c]!s & U;c;b] <v£.[a;b;c] » i. [a;c:b] 1: n/a y/b s/c u/a v/c w/b 

A.G[a;b;c] *C[a;c;b] ac^ab ab=bc ab=?.c 

a. &,!.a;b;c] £ £[a;c;bj 2: saiae 

/»C[a;b;c] G[a;c;b] 3; same 

*cb3 be 4: x/c y/b 

ac Sab /vabrac 5: x' /ac yVab 

and rows 6, 7, 8. 

Abbreviating: 

A, [a;b;c] »,&[a;c;b3 
Z. [®;b;c] ~Z.U;c;b] 

C[a;b;cJ 

C[a;c;bJ 

ac = ab 

cb^bc 

abS? ac 
gives : 

(A**8)V (CaDaEaFaGavA) V(-vCAD) tf~? v (E A~G) VC V~£ VB 
which is a tautology. 

The Oth order elements of H for this proof are: 

a b c ac ab £[a;b;c] <i[a;c;b] e 
The 1st order elements are: 

ba ca cb be &[a;b;c] A[a;c;b] Afb;a;c] &[b;c;a] &[c;a;bj 
<&[c;b;a] £[b;a:c] ,£[b;c;a] £.[e;a;b] 4.[c;b;a]. 
The higher orders are vacuous. 

Since the proof requires elements from the lot order, it is a 1st 
order proof. 
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1. 



y^2 ^B[y;f[K;y;2];2j 



2,) y # z £[x;y;s3 = y 



3. 
4. 



•"5 



6, 

"a* 

10. 

11. 

12. 
13. 



y ^ a £[x;y;s3 «= a 

y -^ a <vf[s;y;s]y ~ f[x;y;z]z 

<vC[x;y;z3 *>G[u;v;w3 xz = uw sy = vnr xy = uv <v,&[x;y;s] ST a{u;v;w] 
u^y u i? s /uC[n;j?;@3 C[ujy;zl C[x;y;u] 

u f y u j 5 a ,vC[x;y;s3 C[u;y;z] C[:;;s;uj 

S[y;u;z3 *>C[u;y;s3 

&[x;y;z3 as A(u;v;w] ^[x;y;z] = £[u;v;v] 
A.ctx;y;z3 y » s 
B[y;u;z] «-£[x;y;u] £<S.[x;y;E3 

B[y;u;z] ^[xjsju] ^c[x;z;yj 

2 2 2 2 2 2 2,2 

x=»y u»v x-u yfu 






14. x« $ x» 

15. C[a;b;c] 

16. Aab s£ ac 

17. £.[a;b;c3 ~4.[a;c;b3 

The function symbol "£" which has been introduced into the fvf comes 
from the existential quantifier in the first postulate * Three constant 
symbols , "a" » "b" , and "c" come f rcsa the universal quantifiers in the 

statement of the theorem. I will abbreviate f [a;b;c] by 0, 
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b f- c B[b;s;cJ !<, rja y/b s/c 

b 4 c s = b 2„ sane 

b •/ c s = c 3. sane 

b f- c "v sb s ec 4 c. sans 

'vC[a;b;e] "*C[a;c:s] as ^ as eh = sc ab^ac 

A/A[a;b;s3 * &[a;c;s] 5» x/a y/b s/s a/a v/c w/s 

s j* b s £ c *vC[a;b;c] C[o;b;c] C{a;b;sj 

6 ff x/a y/b z/c u/s 
s jS b 3 /- c -M3i;a;b;c3 C[s;b;c] C[a;c;s] 

7„ y/b u/s s/c 
B[b;a;c] «vC[8;b;c] 8, same 

&[a;b;s] a c[a;c;s3 ^[a;b;s}= £.[a;c;s] 

9. x/a y/b z/c u/a v/c w/b 
/vC[a$b;c] b = c 10* x/a y/b z/c 

Bfbjsjc] <W.[a;b;s] = L {a;b;c] 11* x/a y/b z/c u/s 

B[b;s;e] /w4.[a;c;sj» £. [ajc;b] 12* same 

L [a;b;s] = Z.[a;b;c} <i.ia;c;s3 = i.[a;c;b] /-.[ajbjs} «£.[a;c;sj 

A,x.[a;b;c] =£[a;c;b3 13. x /£[a;b;s] y &[a;b;c] 

2 2 

u /^[a;c;sl v /£[a;c;b] 

as «= as 14 o x' /as 

C[a;b;cj 15, 

<vab -as ac 16, 

(L [a;b;c] ^4.[a;c;b3 17,, 

The disjuQctioa of these row instances can be verified as tautologous - 
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!n the matrix there are no true constants. There are, however, 
functions of no arguments: "a", "b", and "c"„ Aiaoag the composite faros 
are: 

f[x;y;z] f[x;y;s]y xy Atx;y;s] «£[xjyjz] 

Elements of H which appear in the verification eat are? 

a b c ab ac ££a;b;c] £|a;c;b] 
(the entire 0;-.h order of II). 

f[a;b;c] (abbreviated as ,! s")> a single 1st order element 
and 

as sb sc A[a;b;s] A[a;c;sj £.{a;b;o] 4[a;c;'s] 
from the 2nd order. 

This is a 2nd order proof. 

2,6. Finding a Froof Given a Proof Set 

Since only the postulates x^hich were actually necessary for the proofs 
were included in these examples, the Berbrand universe teas much smaller 
than it would ordinarily be (even finite in the first example) and the 
problem of selecting which elements to work with in searching for a 
proof is correspondingly less difficult. 

Gelerater's program is given a list of all the points, line segments 
etc u involved in the proof it is to generate, with one minor exceptions 
the program can add a line segment which connects two points which it 
already knows about , Essentially, then, Gelernter's program searches 
for a proof already knowing the proof set (with the noted exception) , 
i.e, , those descents it is given along with the theorem to be proved. 
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J. A* Robinson has alco written a program to fin I a proof given a 
proof set. My fooling, is that thie heuristic ally unsophisticated pro- 
gram xfhich generates all substitution instances of the fvf to produce 
proofs of Oth order theorems would be incapable of proving theorems in 
a reasonable time when large numbers of postulates are available.. The 
fact that his program proved some interesting theorems when the set of 
postulates was restricted (as in say examples) tiisleadingly seems to 
indicate that the task is easy. The fact that Gelernter's program 
(which 1 consider an able effort) takes many minutes to solve problems 
of comparable difficulty is also evidence that the problem is not trivial. 

2 « 7 * P roposal; A Program to gind High Order Pr oofs 

I propose to write a program which will produce high order proofs 
in geometry* It will work by first selecting a set of elements which 
seem likely to be useful, and then apply the techniques which have been 
developed for finding a proof given a proof set to search for a verifica- 
tion set, 

The goal I hope to reach is the ability to produce proofs of the 
theorems in Fou ndations of Euclidean Geo metry, [LI J. [L6 contains a 
formalization of some of LI.] This contains an axiomatic development 
of plane geometry up to about the level of Euclid's Elements « 

There are three major areas in which my efforts must be spent. First, 
the Oth order proof heuristics must be translated so as to apply to for- 
mulas expressed in Herbrand's form. Second, a diagram generator must be 
programmed. This was never done by Galeratcr, and is not a simple task. 
Last, and most difficult, will be the development of effective techniques 
for finding the set of elements necessary for a proof. 
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